6.6 Medium
AI Score
Confidence
High
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:N/A:P
0.165 Low
EPSS
Percentile
95.9%
Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service (application crash) via a crafted WMF file.
determina.blogspot.com/2007/01/whats-wrong-with-wmf.html
lists.grok.org.uk/pipermail/full-disclosure/2006-August/048530.html
lists.grok.org.uk/pipermail/full-disclosure/2006-August/048547.html
secunia.com/advisories/21377
securityreason.com/securityalert/1353
www.securityfocus.com/archive/1/442420/100/0/threaded
www.securityfocus.com/archive/1/442426/100/0/threaded
www.securityfocus.com/archive/1/456585/100/0/threaded
www.securityfocus.com/bid/19365
www.securityfocus.com/bid/21992
www.vupen.com/english/advisories/2006/3180
exchange.xforce.ibmcloud.com/vulnerabilities/28281
www.exploit-db.com/exploits/3111